EUVD-2026-100243

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally...

CVE-2026-96916

A heap-based buffer overflow exists in the Windows NTFS file system. This vulnerability allows an authorized attacker to perform a local privilege escalation . The severity is rated as HIGH with a CVSS 3.1 score of 7.8. No specific exploitations are mentioned in the provided documents. Remediatio...

CVE-2026-96912

A Use after free vulnerability in the Windows Client License Service allows an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-416 and has a CVSS 3.1 base score of 7.8 . While the documents confirm the impact of privilege elevation, no specific...

CVE-2026-96858

A missing authentication vulnerability in the Windows Security Account Manager allows an authorized attacker to perform tampering locally . The root cause is identified as CWE-306 . While no specific exploit code is provided, the vulnerability has an official fix available via Microsoft. Detailed...

CVE-2026-96911

The Microsoft Windows Search Component is vulnerable to an improper link resolution before file access (link following) vulnerability. This flaw allows an authorized attacker to achieve local privilege escalation . The CVSS 3.1 score is 7.8 (High), with high impacts on confidentiality, integrity,...

CVE-2026-96918

An improper access control vulnerability exists in Windows NTFS , which allows an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-863 (Incorrect Authorization) and carries a HIGH base severity score of 7.8. Remediation involves an official fix ...

CVE-2026-96910

An untrusted pointer dereference vulnerability exists in the Microsoft Windows Search Component . This flaw allows an authorized attacker to perform a local information disclosure attack. The vulnerability is associated with CWE-822 . No specific software versions, root cause details, or exploit ...

CVE-2026-96913

A heap-based buffer overflow exists in the Windows Kernel , which could allow an authorized attacker to achieve local privilege escalation . The vulnerability is assigned a CVSS 3.1 score of 8.8 (High) , indicating significant impact on confidentiality, integrity, and availability. No specific so...

CVE-2026-96917

A heap-based buffer overflow exists in the Windows PCI Bus Driver . This vulnerability allows an authorized attacker to achieve local privilege elevation . The impact includes high levels of risk to confidentiality, integrity, and availability . An official fix is available via the provided Micro...

CVE-2026-96915

An integer overflow or wraparound vulnerability exists in Windows Kernel-Mode Drivers . This flaw allows an authorized attacker to achieve local privilege elevation . While the vulnerability's impact is categorized as high for confidentiality, integrity, and availability, specific exploit code or...

CVE-2026-96914

An integer overflow or wraparound vulnerability exists within the Windows Virtualization-Based Security (VBS) Enclave . This flaw allows an authorized attacker to achieve local privilege escalation . While the vulnerability is confirmed and has a high severity score (8.8), specific details regard...

CVE-2026-96843

A heap-based buffer overflow vulnerability exists in WebDAV that allows an authorized attacker to achieve local privilege elevation . The vulnerability is assigned a High severity rating (CVSS 3.1 score of 7.8). No specific affected versions, root cause details, or remediation steps are provided ...

CVE-2026-96850

A vulnerability in Windows Modern Device Management (MDM) involving the use of uninitialized resource (CWE-908) and improper null termination (CWE-170) allows an authorized attacker to disclose information locally . The vulnerability has a CVSS 3.1 base score of 5.5 with a local attack vector and...

CVE-2026-96321

An out-of-bounds read vulnerability exists in the Remote Desktop Display Driver . This flaw allows an authorized attacker to perform a local information disclosure . The vulnerability is categorized under CWE-125 and has been assigned a CVSS 3.1 base score of 5.5 (Medium). While the technical roo...

CVE-2026-96324

A Use after free vulnerability in the Microsoft Windows Search Component allows an authorized attacker to achieve local privilege escalation . This issue (tracked as CWE-416 ) impacts the integrity, confidentiality, and availability of the system. While the root cause is identified as a memory ma...

CVE-2026-96854

A type confusion vulnerability exists in the Windows Device Association Service . This flaw allows an authorized attacker to perform an information disclosure locally by accessing a resource using an incompatible type. The vulnerability is associated with CWE-843 and has a CVSS 3.1 base score of ...

CVE-2026-96847

A vulnerability in WebDAV involves an untrusted pointer dereference that allows an authorized attacker to perform a local privilege elevation . The issue is associated with CWE-822 and has a CVSS 3.1 base score of 7.8 (High) . No specific affected versions, root causes, or exploit links are provi...

CVE-2026-96852

A Use after free vulnerability exists in Windows TCP/IP that allows an authorized attacker to achieve local privilege elevation . The vulnerability is associated with CWE-416 . While the CVSS 3.1 score indicates a High severity (7.0), specific technical details regarding the vulnerable component ...

CVE-2026-96846

An out-of-bounds read vulnerability in WebDAV allows an authorized attacker to disclose information locally. The vulnerability is associated with CWE-125 and has a CVSS 3.1 score of 5.5, indicating a medium severity. Exploitation details and specific affected versions are not provided in the docu...

CVE-2026-96853

A Time-of-check time-of-use (TOCTOU) race condition exists in the Windows Win32 Kernel Subsystem . This vulnerability allows an authorized attacker to perform a local information disclosure . While the technical details of the root cause are limited to the TOCTOU classification (CWE-367), the imp...